Falhas do tipo CWE-789
336 resultadosAlocação descontrolada de memória
Ocorre quando uma aplicação aloca memória em quantidade determinada por entrada do usuário sem validação ou limite. Um atacante fornece valores muito grandes, causando consumo excessivo de RAM, negação de serviço ou travamento do sistema.
Exemplo
Uma API aceita um parâmetro 'tamanho_array' e aloca memória diretamente: malloc(tamanho_array * sizeof(int)). Se o atacante enviar tamanho_array = 2 bilhões, a alocação falha ou consome toda a memória disponível, derrubando o serviço.
Como mitigar
Implemente limites máximos hardcoded para alocações baseadas em entrada externa. Valide e sanitize parâmetros de tamanho antes de usar, rejeitando valores acima de um threshold sensato. Monitore consumo de memória por requisição e implemente rate limiting.
CVE-2023-5371MEDIUMMemory Allocation with Excessive Size Value in WiresharkEPSS 0.5%CVE-2026-25579CRITICALNavidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpointsEPSS 0.5%CVE-2026-62370MEDIUMKubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHubEPSS 0.5%CVE-2025-26618HIGHSSH SFTP packet size not verified properly in Erlang OTPEPSS 0.5%CVE-2025-3632HIGHIBM 4769 Developers Toolkit denial of serviceEPSS 0.5%CVE-2026-111551HIGHApache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocationEPSS 0.5%CVE-2026-114629HIGHWeb::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parametersEPSS 0.5%CVE-2025-43857MEDIUMnet-imap rubygem vulnerable to possible DoS by memory exhaustionEPSS 0.5%CVE-2026-12852HIGHMLS wire decoder allocates attacker-declared opaque length before bounds checkEPSS 0.5%CVE-2026-59649HIGHOpenPGP user-attribute subpacket length bounded only by JVM max memoryEPSS 0.5%CVE-2026-81693HIGHopenssl_encrypt before 1.4.9 Denial of Service via QR total fieldEPSS 0.5%CVE-2026-14682HIGHPossible OOM from unbounded up-front allocation on a definite-length readEPSS 0.5%CVE-2026-55213HIGHh2o: musl libc stack overflow (QPACK)EPSS 0.5%CVE-2026-44453HIGHh2o is vulnerable to musl libc stack overflowEPSS 0.5%CVE-2026-81692HIGHopenssl_encrypt before 1.4.9 Denial of Service via STREAMINFOEPSS 0.5%CVE-2026-47321HIGHApache MINA: Unbounded Decompression Amplification DoS in Zlib.inflateEPSS 0.5%CVE-2026-102809HIGHPX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 CommandEPSS 0.5%CVE-2026-77050MEDIUMPotential denial-of-service vulnerability in get_supported_language_variant()EPSS 0.5%CVE-2026-92550HIGHApache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoderEPSS 0.5%CVE-2026-42189HIGHRussh: Pre-auth DoS via unbounded allocation in keyboard-interactive authEPSS 0.5%